188Re: [caplet] Re: ADsafe and the Standard Globals
- Apr 10, 2008Douglas Crockford wrote:
> They are creatures of the DOM.I can see the B-movie poster now :-)
More seriously, all of the objects that Doug just granted access to,
with the exception of Date, provide no authority -- they only provide
pure deterministic functions, constant values, and the ability to
allocate objects of those types (if you don't count that as pure).
I had come up with exactly the same list for Jacaranda -- except
that I had accidentially missed out encodeURIComponent.
implementation thinks the current date/time is, which is technically an
authority -- but not one that is significant for ADsafe's threat model.
- << Previous post in topic Next post in topic >>